Original PIX 506 stopped working after it was placed back into service

We have had a Cisco PIX 506 running for several years and everything was working fine. We decided to replace it for one reason. Sometimes it was if the unit would freeze or hang. We purchased a PIX506E and the configuration of the new PIX506E was identical to the old one, with some exceptions.

Change History for new PIX506E
1. Removed IP addresses that were punched in to allow VNC connections.
2. Removed IPSEC statements for the new 506E (not connecting to another off-site PIX now)

Change History for Original working PIX506
None - everything was left as it always was

Step 1. I removed the original working PIX 506 from the network, and installed the new PIX506E.
Step 2. The new 506E would allow us to access the internet, but we could not access on of our internally hosted SharePoint sites with https assigned. Could navigate to it by server name and port.
Step 3. I removed the new PIX to place on localized hub while browsing through the configuration
Step 4. I re-installed the original perviously working 506 model
Step 5. Once the original was reconnected to the network, we have no internet access at all.
Step 6 I reloaded the original 506, power cycled it, still nothing
Step 7. Our ISP was able to ping our PIX's IP address (static assigned by them)
Step 8. I removed the original PIX and placed the 506E back into service
Step 9. Now this previously working (internet access) 506E would not allow use internet access
Step 10. Removed the 506E and replaced with 506, still no internet access.
Step 11. No access to internet with either PIX now.

What in the world could be going on? NOTHING was changed / modified on the original PIX506, so when it was reconnected to the network, we obviously expected internet access, as well as access to our SharePoint site.

I appreciate your feedback. I am not currently on site with the config info.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

When changing out devices that will use the same IP address as a previously configured device, sometimes you must manually clear the ARP tables on the devices connected to the new device.  In this case, it would be the switch/hub that is connected to your inside PIX interface, and/or the DSL/cable modem that is plugged into your outside PIX interface.  Power cycling those two devices should clear the ARP table and allow it to pick up the new PIX's MAC address for the directly connected interface.

This doesn't however really explain why neither of the firewalls can pass traffic now.  But, I would try putting the new one back into place and then power cycling the modem and the switch/hub that is plugged into the inside interface and see if you can then get to the Internet.
jsopAuthor Commented:
I appreciate your response. It actually (if you can believe this one) was on our ISP's end. For years we had been paying for a range of "Static IP's". Well, when we disconnected the original PIX, we lost our lease on the static IP. It has been resolved.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Great!  Glad you got it fixed.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.